This English version is provided for information; the French version is the legally binding one.

Privacy

Last updated: 16 October 2026

BoosterParty collects the bare minimum needed to run its games. No advertising, and no data sold or shared.

Data controller: Lucas Charrier, 197 rue oberkampf, 75011, Paris (contact-us@boosterparty.com).

What we keep

• Your account, shared by every game: email address, username (visible to other players), password (only its hash, never the password itself), chosen language.
• Your games, one by one: your cards, currency, Boosters, Sets, auctions, bids and trades, your friends, your referred friends and your referrer.
• The games you create, if any: their settings and the data you imported (file, Google Sheet or Notion database). For a Notion database, your integration's secret token is kept so that it can be read again when you ask; it is deleted with the game.
• Your sign-in: a session cookie, essential to keep you signed in. Your IP address is never stored as such: an unreadable fingerprint is used to limit attempts (sign-in, sign-up, messages, reports) and is erased after an hour at most.
• Your help messages: if you write to us from the Help and contact page, we keep your message, its topic, the page you came from and the email to reply to (your account's, or the one you give), to answer you and improve the platform. They are kept for 2 years, and you can ask us to delete them at any time.
• Your reports: if you report content, we keep your report, your name and your email if given, to look into it and reply to you, for 3 years after the decision.
• A private game's invitation link: a cookie (1 year) remembers that you opened it, so that you can come back.
• The trial Booster: if you open a Booster without an account, a technical cookie (24 h, one per game) links it to your browser. The pull is kept for 24 h so that you can create your account, then deleted if nobody has used it.
• Your language: a cookie (1 year) remembers the language you chose, French or English. These cookies are only used to make the platform work, hence no cookie banner.
• Traffic: we count page views and a few steps (sign-up, game created, game published, payment started) with Umami, an open-source tool that we host ourselves (in France), to learn how the platform is found and used (our legitimate interest, 6.1.f). No cookie, no account or email, and your IP address is not kept: it is only used to work out the country and to recognise a single visit. If your browser sends the “Do Not Track” signal, nothing is measured.

Legal bases (article 6 of the GDPR): the performance of the service you request by creating an account, turning on an alert or buying a plan (6.1.b); our legitimate interest in protecting the platform from abuse and answering your messages (6.1.f); our legal obligations for reports and accounting (6.1.c). Every alert email contains a link to stop receiving them.

Data imported by creators

The content of a game's cards (names, texts, images) comes from the data imported by its creator, who is responsible for it. If it contains information about you that you want removed, write to the game's creator or to contact-us@boosterparty.com.

Who has access

• The platform's hosting provider: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (+33 9 72 10 10 07).
• Resend (United States), which sends our emails (address confirmation, forgotten password, alerts, moderation decisions, copies of help messages to the team): it receives your email address and the content of the message.
• Card images are copied by the platform and served from our own storage (Scaleway, in France). Until an image has been copied, or if it can't be, it is loaded from the address given by the game's creator: the site hosting it then sees your IP address.
• Have I Been Pwned, which tells us whether a new password appears in lists of hacked passwords: only the first 5 characters of its hash are sent, never the password nor its full hash.
• Google Sheets and Notion are only contacted by our server, when a creator imports or syncs their data; they see nothing about you.
• Stripe (Ireland and United States), which collects the plans bought by game creators: it receives your email address and payment details, which we never see. The plans are sold by Link, Stripe's service, as merchant of record: for the payment, the invoice and the tax, Link processes this data on its own behalf, under its privacy policy.Payment records (plan, amount, date) are kept for 10 years, as accounting law requires, even if the game or the account is deleted.

Transfers to the United States (Resend, Stripe) are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long

For as long as your account exists. When you delete it, everything is erased straight away, except your past auction sales, kept without your username because they make up the cards' market value, and your payment records (see above). The games you created stay online, with no creator, unless you deleted them from the Studio; a running subscription is cancelled.

Your rights

You can view your information and delete your account at any time from the My account page. For any other request (access, rectification, objection, portability), write to contact-us@boosterparty.com. You can also lodge a complaint with the CNIL (the French data protection authority).

Legal notice · Terms of use · Privacy · Terms of sale · Help and contact · Report content · Back to the home page